Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/YmTffjkwLNlrV-CN55e5anWu_MA.roa
File:                     YmTffjkwLNlrV-CN55e5anWu_MA.roa (raw, json)
Hash identifier:          ObWEHxHddTXT1+9Fx83LW83WQIq8foCbakyN9DjDcM4=
Subject key identifier:   62:64:DF:7E:39:30:2C:D9:6B:57:E0:8D:E7:97:B9:6A:75:AE:FC:C0
Certificate issuer:       /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial:       195D0056
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/YmTffjkwLNlrV-CN55e5anWu_MA.roa
Signing time:             Sat 01 Jan 2022 14:08:49 +0000
ROA not before:           Sat 01 Jan 2022 14:08:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21277
IP address blocks:        185.37.160.0/22 maxlen: 22
                          2a00:f7a0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425525334 (0x195d0056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
        Validity
            Not Before: Jan  1 14:08:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6264df7e39302cd96b57e08de797b96a75aefcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:bc:b8:15:00:bf:4f:68:ff:0a:57:87:a4:
                    24:e5:4d:a0:11:a6:d2:a4:51:55:86:c0:de:a4:82:
                    8f:fd:7d:07:45:c8:67:30:01:0b:11:ac:30:09:fe:
                    2a:ec:69:b8:e6:71:66:5e:8c:ad:d5:cf:a4:e2:d6:
                    74:52:49:82:18:d4:bb:78:5a:cc:50:a0:9b:23:ea:
                    b2:c0:57:f1:b6:ed:9c:7d:b6:e9:b9:32:b7:1b:cb:
                    c7:a1:21:c5:45:e9:2e:d5:13:4c:11:cf:5f:83:3f:
                    c6:f1:8a:ba:aa:15:b9:e5:16:32:24:54:f6:97:58:
                    dd:66:92:41:ae:0b:49:70:76:d1:46:6f:c9:57:99:
                    0e:05:e8:78:d9:35:99:55:64:be:f5:4b:9d:d3:b7:
                    1e:c9:71:3f:4c:5b:ad:98:23:6f:54:63:08:19:f0:
                    af:82:e8:16:84:b7:32:06:86:95:13:50:48:48:4c:
                    d4:c9:a1:ee:76:2a:c0:db:94:ab:c0:10:86:f1:1c:
                    c3:85:fe:92:19:f4:66:6c:bb:da:19:ea:5c:78:46:
                    6e:80:41:7b:79:fa:9d:04:73:e3:43:48:87:c3:e6:
                    aa:3a:1b:3b:06:3e:36:86:b4:49:0e:75:c4:fe:e0:
                    5d:45:9b:73:6d:44:ba:1a:5b:91:15:9b:d0:8f:1e:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:64:DF:7E:39:30:2C:D9:6B:57:E0:8D:E7:97:B9:6A:75:AE:FC:C0
            X509v3 Authority Key Identifier:
                keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/YmTffjkwLNlrV-CN55e5anWu_MA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.37.160.0/22
                IPv6:
                  2a00:f7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:bf:8a:61:d0:db:97:4a:1e:a0:e4:12:c6:b8:7c:2f:3d:d4:
         e0:a1:4f:be:59:1e:5d:5f:f9:cd:1e:58:50:02:1d:c2:5c:8a:
         1c:4a:c8:20:03:c2:fe:f2:b0:6b:8f:7d:58:c6:e4:8a:34:94:
         21:ed:21:6b:c9:22:c6:ba:a0:6e:07:a3:6c:da:82:d5:d6:43:
         51:d3:15:d0:aa:18:56:e3:44:e5:0f:07:96:b2:4a:17:c3:f9:
         34:d9:9e:ae:02:51:63:f6:b1:03:bd:46:f8:81:c4:c0:ce:86:
         00:28:8e:e6:65:c0:b9:62:e9:bc:68:0c:6a:ae:18:93:fe:ad:
         a7:1f:f1:1e:44:2b:17:d1:92:fa:42:10:32:71:8c:92:a0:31:
         83:f8:e3:3d:35:c7:9a:a6:6e:6b:2a:7b:e6:5d:b5:0e:ae:83:
         07:61:a9:19:55:8a:15:cb:fe:c4:01:83:2a:f9:66:7d:51:97:
         a3:15:18:4a:2a:bd:9a:85:25:47:e7:53:e9:a1:e2:10:ba:a4:
         56:e9:f6:e2:d8:c3:4e:89:1c:68:c1:2b:78:8c:b6:ab:bd:3f:
         b8:c5:5c:c5:71:7e:71:ad:f9:1d:4c:29:a0:c1:8e:60:92:59:
         f0:bf:0c:51:80:72:91:ff:ac:74:91:ab:43:e4:46:8d:44:9f:
         0b:a9:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----